GoodinArs

Dan Goodin / Ars Technica: Researchers detail an unpatchable vulnerability in Apple's M-series of chips that lets attackers extract secret keys from Macs during cryptographic operations — Fixing newly discovered side channel will likely take a major toll on performance. — A newly discovered vulnerability baked … Dan Goodin / Ars Technica: Researchers detail an unpatchable vulnerability in Apple's M-series of chips that lets attackers extract secret keys from Macs during…

Dan Goodin / Ars Technica: Analysis: the Clop ransomware group has breached 122 organizations and obtained the data of ~15M people to date by exploiting a critical zero-day flaw in MOVEit — The dramatic fallout continues, with as many as 122 organizations now breached. — The dramatic fallout continues … Dan Goodin / Ars Technica: Analysis: the Clop ransomware group has breached 122 organizations and obtained the data of ~15M people to date by exploiting a critical…

Dan Goodin / Ars Technica: Chainalysis: crypto flowing into mixer services hit a 30-day moving average of $51.8M in April, a record high; Russia's Hydra Market accounted for 50% of funds — Despite a significant Achilles' heel, mixers are seeing unprecedented demand. — The amount of cryptocurrency flowing … Dan Goodin / Ars Technica: Chainalysis: crypto flowing into mixer services hit a 30-day moving average of $51.8M in April, a record high; Russia's Hydra Market…

Dan Goodin / Ars Technica: Researchers detail fundamental cryptography flaws in MEGA's end-to-end encryption scheme that could let the cloud storage service decipher stored files — Fundamental flaws uncovered in Mega's encryption scheme show service can read your data. — In the decade since larger … Dan Goodin / Ars Technica: Researchers detail fundamental cryptography flaws in MEGA's end-to-end encryption scheme that could let the cloud storage service decipher stored…

Dan Goodin / Ars Technica: A report highlights security risks in Meeting Owl, a videoconference device used by governments and colleges, including exposure of its Pro users' data — No patch yet for easy-to-hack access point that leaks data and exposes networks to hacks. — The Meeting Owl Pro is a videoconference device … Dan Goodin / Ars Technica: A report highlights security risks in Meeting Owl, a videoconference device used by governments and colleges, including…

Dan Goodin / Ars Technica: Researchers told Microsoft on April 12 about an RCE Windows exploit active in the wild; Microsoft called the flaw critical on May 30 but still hasn't patched it — All supported versions of Windows affected. — A critical code execution zero-day in all supported versions of Windows … Dan Goodin / Ars Technica: Researchers told Microsoft on April 12 about an RCE Windows exploit active in the wild; Microsoft called the flaw critical on May 30 but…